I just released Eve 2.0.4, the REST API framework for #python. It’s available on PyPI and includes a relevant security fix so you might want to update ASAP.